FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

znc -- multiple vulnerabilities

Affected packages
		znc	<	1.10.3

Details

VuXML ID	b7ae786a-af80-11f1-9800-641c67a117d8
Discovery	2026-09-13
Entry	2026-09-13

ZNC reports:

CVE-2026-82373: Use-after-free when unloading modules, triggered by unprivileged users. To mitigate, set DenyLoadMod to true.

CVE-2026-82374: Null pointer dereference in crypt module, triggered by IRC server.

CVE-2020-11022, CVE-2020-11023: Updated the old bundled vulnerable version of jQuery to 3.5.1.

[source]

References

CVE Name	CVE-2020-11022
CVE Name	CVE-2020-11023
CVE Name	CVE-2026-82373
CVE Name	CVE-2026-82374
URL	https://github.com/znc/znc/releases/tag/znc-1.10.3
URL	https://wiki.znc.in/ChangeLog/1.10.3